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Abstract. Path checking, the special case of the model checking problem where the 
model under consideration is a single path, plays an important role in monitoring, test- 
ing, and verification. We prove that for linear-time temporal logic (LTL), path checking 
can be efficiently parallelized. In addition to the core logic, we consider the extensions 
of LTL with bounded-future (BLTL) and past-time (LTL-|-Past) operators. Even though 
both extensions improve the succinctness of the logic exponentially, path checking re- 
mains efficiently parallelizable: Our algorithm for LTL, LTL-f Past, and BLTL+Past is in 
AC'(logDCFL) c NC. 



Linear-time temporal logic (LTL) is the standard specification language to describe proper- 
ties of computation paths. The problem of checking whether a given finite path satisfies an 
LTL formula plays a key role in monitoring and runtime verification |14l [T2| d EJ [5] , where 
individual paths are checked either online, during the execution of the system, or offline, for 
example based on an error report. Similarly, path checking occurs in testing [3] and in sev- 
eral static verification techniques, notably in Monte-Carlo-based probabilistic verification, 
where large numbers of randomly generated sample paths are analyzed |31j . 

Somewhat surprisingly, given the widespread use of LTL, the complexity of the path 
checking problem is still open The established upper bound is P: The algorithms in the 
literature traverse the path sequentially (cf . [Til ) i t>y going backwards from the end 

of the path, one can ensure that, in each step, the value of each subformula is updated in 
constant time, which results in running time that is quadratic in the size of the formula plus 
the length of the path. The only known lower bound is NC^ [9j , the complexity of evaluating 
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Figure 1: Circuit resulting from unrolling the LTL formula ((a U 6) U (c U d)) U e over a path 
p of length 5. We denote the value of an atomic proposition p at a path position 
i = 0, ... ,4 by Pi. 

Boolean expressions. The large gap between the bounds is especially unsatisfying in light 
of the recent trend to implement path checking algorithms in hardware, which is inherently 
parallel. For example, the IEEE standard temporal logic PSL [15], an extension of LTL, 
has become part of the hardware description language VHDL, and several tools [71 [5l [11] 
are available to synthesize hardware-based monitors from assertions written in PSL. Can 
we improve over the sequential approach by evaluating entire blocks of path positions in 
parallel? 

Parallelizing LTL path checking. We show that LTL path checking can indeed be par- 
allelized efficiently. Our approach is inspired by work in the related area of evaluating 
monotone Boolean circuits |il3l [IHl EOj HI EH [6] . Rather than sequentially traversing the 
path, we consider the circuit that results from unrolling the formula in positive normal 
form over the path using the expansion laws of the logic. Using the positive normal form 
of the formula ensures that the resulting circuit is monotone. The size of the circuit is 
quadratic in the size of formula plus the size of the path. For logarithmic measures, the 
circuit thus is of the same order as the input. Figure [T] shows such a circuit for the formula 
((all U (cUd)) Ue and a path of length 5. 

Yang j^Qj and, independently, Delcher and Kosaraju [8j have shown that monotone 
Boolean circuits can be evaluated efficiently in parallel if the graph of the circuit has a 
planar embedding. Unfortunately, this condition is already violated in the simple example 
of Figure [T] as shown in Figure [2j Individually, however, each operator results in a planar 
circuit: for example, d \J e results in eo V (do A (ei V (di A . . .) • • • ). The complete formula 
thus defines a tree of planar circuits. 

Our path checking algorithm works on this tree of circuits. We perform a parallel tree 
contraction [IJ [19l [18] to collapse a parent node and its children nodes into a single planar 
circuit. Simple paths in the tree immediately collapse into a planar circuit; the remaining 
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Figure 2: Circuit resulting from unrolling the LTL formula ((a U 6) U (c U d)) U e over a path 
p of length 5. The red colored minor of the graph of the circuit is a K^. Thus 
the circuit is not planar. 

binary tree is contracted incrementally, until only a single planar circuit remains. The key 
insight for this construction is that a contraction can be carried out as soon as one of the 
children has been evaluated. Initially, all leaves correspond to atomic propositions. During 
the contraction all leaves are evaluated. Because no leaf has to wait for the evaluation of 
its sibling before it can be contracted with its parent, we can contract a fixed portion of the 
nodes in every sequential step, and therefore terminate in at most a logarithmic number of 
steps. 

The path checking problem can, hence, be parallelized efficiently. The key properties 
of LTL that are exploited in the construction are the existence of a positive normal form 
of linear size and expansion laws that, when iteratively applied, increase the size of the 
Boolean circuit only linearly in the number of iteration steps. The combinatorial structure 
of the resulting circuit allows for an efficient reduction of the evaluation problem to the 
evaluation problem of planar Boolean circuits. In addition to planarity, our construction 
maintains some further technical invariants, in particular that the circuits have all input 
gates on the outer face. Analyzing this construction, we obtain the result that the path 
checking problem is in AC^(logDCFL): 

Theorem 1. The LTL path checking problem is in AC'(logDCFL). 

The AC^(logDCFL) complexity results from a reduction that is performed by an outer 
algorithm, which can be implemented as a uniform family of Boolean circuits of logarithmic 
depth, and an inner operation, which is represented through unbounded fan-in gates that 
are embedded in the circuits and that serve as logDCFL oracles. The AC^ complexity of the 
outer reduction is due to the tree contraction algorithm. Throughout the contraction, each 
atomic contraction operation processes a sub-circuit with a size that is of the same order as 
the overall input circuit. Hence, the oracle gates have non-constant fan-in. The whole tree 
contraction is performed in a logarithmic number of parallel steps. Thus, the contraction 
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algorithm implements an AC reduction. Within the AC contraction circuits, the oracle 
gates perform the evaluation of a certain class of monotone planar Boolean circuits. This 
operation can be bound to a complexity of logDCFL. In summary, the overall path checking 
algorithm consists of two sequential reduction steps: First the LTL path checking problem 
is reduced (in logarithmic space) to the problem of evaluating a certain class of monotone 
Boolean circuits. Second, the problem of evaluating those circuits is AC reduced to the 
problem of evaluating a certain class of monotone planar Boolean circuits. The latter 
problem is solved by an logDCFL oracle. 

The LTL path checking problem is closely related to the membership problems for 
the various types of regular expressions: the membership problem is in NL for regular 
expressions [16], in logCFL for semi-extended regular expressions [28], and P-complete for 
star- free regular expressions and extended regular expressions [27j. Of particular interest 
is the comparison to the star- free regular expressions, since they have the same expressive 
power as LTL on finite paths [24]. With AC^(logDCFL) vs. P, our result demonstrates a 
computational advantage for LTL. 

LTL with past and bounded-future operators. Practical temporal logics like PSL 
extend LTL with additional operators that help the user to write shorter and simpler spec- 
ifications. Such extensions often come at a price: adding extended regular expressions, 
for example, makes the path checking problem P-complete [27j. We show that this is not 
always the case: past-time and bounded operators are two major extensions of LTL, which 
both improve the succinctness of the logic exponentially, and whose path checking problems 
remain efficiently parallelizable. 

Past-time operators are the dual of the standard modalities, referring to past instead 
of future events. Past-time operators greatly simplify properties like "6 is always preceded 
by a" , which, in the core logic, require an unintuitive application of the Until operator, as 
in G -i(-ia U 6 A -la). Furthermore, Laroussinie, Markey and Schoebelen [23j proved that 
the property "all future states that agree with the initial state on propositions pi,p2, ■ ■ - Pn, 
also agree on proposition pQ," which can obviously be expressed as a simple past-time 
formula, requires an exponentially larger formula if only future-time operators are allowed. 
However, since past operators are the dual of future operators, they also result in planar 
circuits; hence, the construction for LTL can directly be applied to the tree of circuits that 
results from LTL formulas with unbounded past and future operators and we obtain the 
following result: 

Theorem 2. The LTL+Past path checking problem is in AC' (logDCFL). 

Bounded operators express that a condition holds at least for a given, fixed number of 
steps, or must occur within such a number of steps. Bounded specifications are especially 
useful in monitoring applications [TTj, where unbounded modalities are problematic: if only 
the finite prefix of a computation is visible, it is impossible to falsify an unbounded live- 
ness property or validate an unbounded safety property. The succinctness of the bounded 
operators is due to the fact that expanding the bounded operators into a formula tree repli- 
cates subformulas, causing an exponential blow-up in the formula size. Another exponential 
blow-up is due to the logarithmic encoding of the bounds compared to an unary encoding 
in the form of nested next-operators. 

A naive solution for the path checking problem of the extended logic would be to simply 
unfold the formula to the core fragment and then apply the construction described above 
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Figure 3: The circuit for the bounded formula (pV^ip. Since the red colored subgraph 
is a i^3,3, the circuit has no planar embedding. However, if the (j)i-gates are 
constants, then propagating the constants eliminates the edges that prevent the 
shown embedding from being planar. 

for the LTL operators. Because of the doubly exponential blow-up, however, such a solution 
would no longer be in NC. If we instead apply the expansion laws for the bounded operators 
to the original formula, we obtain a circuit of polynomial size, but with a more complex 
structure. Because of this more complex structure, the path checking construction that we 
described above for the core logic is no longer applicable. Consider the circuit corresponding 
to the bounded formula (j)\J3 ip, shown in Figure[3| Since the graph of the circuit contains a 
-RTs^a subgraph, it has no planar embedding. Translating a formula with bounded operators 
to a tree of circuits would thus include non-planar circuits, which in general cannot be 
evaluated efficiently in parallel. 

The key insight of the construction for the extended logic is that, although the circuit for 
the bounded operators is not planar a priori, an equivalent planar circuit can be constructed 
as soon as one of the direct subformulas has been evaluated. Suppose, for example, that 
the (pi-gates in the circuit shown in Figure [3] are constants. Propagating these constants 
eliminates all edges that prevent the shown embedding from being planar! In general, simple 
propagation is not enough to make the circuit planar. This is illustrated in Figure [4j where 
the same formula is analyzed under the assumption that the -i/'j-gates are constant. While 
the propagation of the constants replaces parts of the circuit (identified by the dotted lines) 
with constants, there remain references to (pi-gates, e.g., the two references to (p2, that 
prevent the shown embedding from being planar. However, an equivalent planar circuit 
exists: This circuit, shown in Figure |4] as a gray overlay, replaces the disturbing references 
to the (pi-gates by vertical edges to subcircuits. For example, the first occurrence of (p2 in 
(^2 A (0 V {(p2 A (0 V {tps A 1)) is replaced with an edge to the subcircuit (^2 A (0 V {tps A 1)). 
The resulting circuit is equivalent, because the additional conjunct is redundant. 
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Figure 4: The circuit for the bounded formula (pU^ip from Figure[3j If the ipi-gates evaluate 
to the constants shown in the bottom line, then the circuit depicted as a gray- 
colored overlay is an equivalent planar circuit. 

Based on these observations, we present a translation from bounded temporal formulas 
to circuits that is guaranteed to produce planar circuits, but requires that one of the direct 
subformulas has already been evaluated. To meet this requirement, our path checking 
algorithm generates the circuits on-the-fly: a circuit for a subformula cp is constructed only 
when a direct subformula of (j) is already evaluated. In this way, we avoid the construction 
of circuits that cannot be evaluated efficiently in parallel. As in the algorithm for LTL, we 
evaluate a fixed portion of the subformulas in every sequential step and thus terminate in 
time logarithmic in the size of the formula (bounds are encoded in 0(1)) plus the length of 
the path. We prove the following result: 

Theorem 3. The BLTL+Past path checking problem is in AC'(logDCFL). 

The remainder of the paper is structured as follows. After preliminaries in Section [2j 
Section [3] discusses the evaluation of monotone Boolean circuits. We introduce transducer 
circuits, which are circuits with a defined interface of input and output gates, and show 
that the composition of two planar transducer circuits can be computed in logDCFL. In 
Section |4j we describe the on-the-fly translation of BLTL+Past-formulas to planar circuits. 
In Section [Sj we present the parallel path checking algorithm. We conclude with pointers 
to open questions in Section [6) 

2. Preliminaries 

2.1. Linear-Time Temporal Logic. We consider linear-time temporal logic (LTL) with 
the usual finite-path semantics, which includes a weak and a strong version of the Next 
operator [21]. Let P be a set of atomic propositions. The LTL formulas are defined 
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inductively as follows: every atomic proposition p £ P is a formula. If (f> and ip are formulas, 
then so are 



The size of a formula cf) is denoted by ||^||. 

LTL formulas are evaluated over computation paths. A path p = po, . . . , Pn-i is a finite 
sequence of states where each state pi for i = 0, . . . , n — 1 is a valuation pi G 2^ of the 
atomic propositions. The length of p is n and is denoted by \\p\\. Given an LTL formula (f), 
a nonempty path p satisfies (f) at position i (0 < i < \\p\\), denoted by (p, i) |= (f>, if one of 
the following holds: 

• (p & P and (p G pi, 

» (f> = ^tjj and (p, i) ^ ip, 

• (j) = (pi A 4>r and (p, i) |= (pi and (p, i) |= (pr, 

• (p = (pi\/ (pr and (p, i) |= or (p, i) |= c/i^, 

• (p = X^ip and i + 1 < IIpII and (p, i + 1) |= V', 

• (p = X^ip and i + 1 = IIpII or (p, i + 1) |= ■?/;, 

• (/) = (/)/U^r and 3j,i < j < ||p||.(p,j) \= (pr and yk,i<k< j.{p,k) |= (pi, or 

• (/) = 0iR(/)r and Vj,i < J < ||p||.(p,i) |= (/)r or 3k,i < k < j.{p,k) \= (pi. 

An LTL formula cp is satisfied by a nonempty path p (denoted hy p \= (p) iff (p, 0) |= (p. 
By ^(p) we denote the Boolean sequence s G BH^'H with = 1 if and only if (p, |= for 
< i < ||p||. 

An LTL formula (p is said to be in positive normal form if in (p only atomic propositions 
appear in the scope of the symbol The following dualities ensure that each LTL formula 
(p can be rewritten into a formula cp' in positive normal form with ||^'|| = 0(||^||). 



The semantics of LTL implies the expansion laws, which relate the satisfaction of a temporal 
formula in some position of the path to the satisfaction of the formula in the next position 
and the satisfaction of its subformulas in the present position: 



We now extend LTL with the past-time operators (strong Yesterday), Y^ (weak Yester- 
day), S (Since), and T (Trigger) with the following semantics: 



^(p, (pAip, (pVip, X^(p, X^0, (pJJtp, and (pRtp. 



^^(P 
^-fcP 

-^{<Pl A (pr) 
-n{(pl\J(pr) 



X^^(P ; 

h(Pi)vi^(Pr) ; 

{^^l)R{^(Pr) ■ 



(Pl\](Pr = (prV {(plAX^{(Pi\J(t>r)) 
(PlR(Pr = (PrA{(piyX'^{(PiR(Pr)) . 



• (p, i) 1= Y^V iff 



i — 1>0 and (p, i — 



• (p, i) \= Y^V iff 



z — 1 < or (p, z — 1) t= , 



• (p, i)\=(piS (pr iff 



3j, i>j> 0-{p,j) t= 4>r and \lk,i>k> j.{p, k) \= (pi , and 
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• |=0,T0, iff 



Vj,i >j> 0.(p, j) 1= (pr or 3k, i 



> k > j.{p,k) 1= cj)i . 



We call the resulting logic linear-time temporal logic with past (LTL+Past). The following 
dualities ensure that each LTL+Past formula (j) can be rewritten into a formula (f)' in positive 
normal form with = 0(||(^||). 



To obtain linear-time temporal logic with past and bounds (BLTL+Past) we further add the 
bounded temporal operators Uf, , R;, , Sf, , and T^, where 6 G N is any natural number. 
(For technical reasons, the size of a formula is defined using unary encoding for the bounds. 
However, our results are actually indepent of the encoding of the bounds.) The semantics 
of the bounded operators is defined as follows: 

• (P, i) \= (t>l Ub (t)r iff 



3i, i<j< min(? + b, \\p\\ - l).(p, j) \= and \/k,i<k< j.{p, k) \= (t)i , 

• {P, i) \= (t>l R-b <t>r iff 

Vj,i <j< min(i + 6, ||p|| - l).{p,j) \= <t)r ov 3k,i < k < j.{p,k) \= (f)i , 

• {P, i) \= (t>l Sb iff 

3i, i> 3 > max(i — 6, 0).(/9, j) |= and V/c, i > k > j.{p, k) \= (f)i , and 

• {P, i) \= 4>l Tfc 4>r iff 



The expansion laws for the bounded operators are defined as follows for 6 G N: 



The expansion laws for the past operators are 



Vj, i>j> max(^ - b, (}).{p, j) \= (f>r or 3k,i > k > j.{p, k) \= (t)i . 
The following dualities apply to the BLTL+Past operators: 




for 6 > 0, 
for 6 = 0, 

for 6 > 0, 



for 6 > 0, 
for 6 = 0. 



for 6 > 
for 6 = 
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We are interested in determining if a formula is satisfied by a given path. This is the path 
checking problem. 

Definition 2.1 (Path Checking Problem). The path checking problem for LTL (LTL+Past, 
BLTL+Past) is to decide, for an LTL (LTL+Past, BLTL+Past) formula (f) and a nonempty 
path p, whether p |= (j). 

Later in this paper we will present a path checking algorithm for BLTL+Past. The 
algorithm constructs a circuit that is of polynomial size in the length of the input compu- 
tation path and in the size of the input formula including the sum of the bounds. However, 
we do not want the complexity of the algorithm to depend on the encoding of the bounds. 
The following lemma allows us to prune the size of the bounds that occur in a BLTL+Past 
formula to the length of the computation path. 

Lemma 2.2. Given a BLTL+Past formula (p and a finite computation path p, the 
BLTL+Past formula (j)' is obtained from (j) by setting each bound n in (p to min(n, \\p\\). 
It holds that p \= (j) if and only if p\= (j)' . 

Proof. By induction over 0. □ 

2.2. Complexity classes witliin P. We assume familiarity with the standard complexity 
classes within P. NC is the class of decision problems decidable in poly logarithmic time on 
a parallel computer with a polynomial number of processors. L is the class of problems that 
can be decided by a logspace restricted deterministic Turing machine. logDCFL is the class 
of problems that can be decided by a logspace and polynomial time restricted deterministic 
Turing machine that is additionally equipped with a stack. AC*,i E N, denotes the class of 
problems decidable by polynomial size unbounded fan-in Boolean circuits of polylogarithmic 
depth of degree i. AC is defined as IJieN AC*. Throughout the paper, all circuits are assumed 
to be uniform. Often we use functional versions of complexity classes. Since in our case 
the output size of the functions is always polynomially bounded we can use a polynomial 
number of circuits for the corresponding class of decision problems, each for computing a 
single bit of the output. Thus, in the following we do not explicitly distinguish between 
decision problems and functional problems [17j . It holds that 

AC° c L c logDCFL c AC^ c AC^ c • • • c AC = NC c P . 

Further details can be found in the survey paper by Johnson [17j. 

Given a problem P and a complexity class C, P is AC^ Turing reducible to C (denoted 
as -P € AC^(C)) if there is a family of AC^ circuits with additional unbounded fan-in 
C-oracle gates that decides P. It holds that 

AC^ c AC^ (logDCFL) c AC^ . 

For further details on AC^ reductions, we refer to [29j. 
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Figure 5: An parallel contraction process as produced by Algorithm 2.3 



2.3. Parallel Tree Contraction. The path checking algorithm presented in this paper 
relies on efficient parallel tree contraction. Here we follow the approach of [Ij and [19j . 
A rooted binary tree is called regular if all inner nodes have exactly two children. Let 
To = {Vq^Eq) be an ordered, rooted, regular, binary tree. A contraction step on % takes a 
leaf / of Ti, its sibling s, and its parent p and contracts these nodes into a single node s' in 
the tree TI+i = (Vi+i,£'i+i) with 

Vi+i = {Vi\{l,p}), and 



E., 



Ei \ {{p, I), {p, s)} Hp is the root of %, 

{Ei \ {(p, /), (p, s), U {(g, s)},q € Vi is parent of p otherwise. 

Using the fact that a contraction step is a local operation it is possible to perform contraction 
steps in parallel on non-overlapping subtrees. 

A tree contraction on an ordered, rooted, regular, binary tree T is a process that 
iteratively applies contraction steps on the tree T until it is contracted into a singleton tree. 



Algorithm 2.3 from |18j performs a tree contraction in [logn] stages of parallel contraction 
steps. 

Algorithm 2.3. 

Input: an ordered, rooted, regular, binary tree T with n leaves. 
Effect: contracts T into a singleton tree. 

Number the leaves in order from left to right as 1, . . . , n. 
for [logn] iterations do 

Apply the contraction step to all odd numbered leaves that are the left child of their 

parent. 

Apply the contraction step to all odd numbered leaves that are the right child of their 
parent. 

Update the numbering of the remaining (even numbered) leaves by dividing each leaf 
number by two. 
end for 

The algorithm can be implemented on an exclusive read exclusive write random access 
memory machine (EREW PRAM) such that it runs in time O(logn) with a total work 
of 0{n) [18j. It is well known that problems that can be solved on an EREW PRAM in 
time O(logn) with polynomial total work are contained in AC^ [29]. Figure [s] shows a tree 
contraction process for an example tree. 

In order to use the parallel tree contraction algorithm to compute some function / on 
a labeled tree, the contraction step is piggybacked with a local operation on the labels of 
the nodes involved in the contraction step. In order for / to be in AC^, the individual 
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contraction steps must be performed in constant time. For our constructions this is not 
the case. However, by piggybacking the contraction step with operations that for some 
complexity class C are solvable with C-oracle gates, the problem of computing / is AC^- 
reduced to C. Hence, by showing that the complexity of the contraction step is in C, the 
overall complexity of / is proven to be in AC'(C). 

3. Monotone Boolean Circuits 

A monotone Boolean circuit {T, 7) consists of a set F of gates and a gate labeling 7. The 
gate labeling labels each gate either with a Boolean value, with the symbol ?, with a tuple 
{op, left, right), or with a tuple {id, sue), where op £ {and, or}, and left, right, and sue are 
gates. 

A gate that is labeled with a Boolean value is called a constant gate. A gate that is 
labeled with ? is called a variable gate. For a non-constant, non- variable gate a labeled with 
{op, b, c) or {id, b), we say that a directly depends on b and c, denoted by a->-b, a ■>- c. The 
dependence relation is the transitive closure of A gate on which no other gate depends 
is called a sink gate. A circuit must not contain any cyclic dependencies. 

For a circuit G = (F, 7), const(G) denotes the set of all constant gates in F. If F = 
const(G), we call G constant. By var(G) the set of all variable gates of F is denoted. Finally 
we define src(G) to be the set of all variable gates and all constant gates that are not sink 
gates in F. In the following, we assume that all circuits are monotone Boolean circuits. We 
omit the labeling whenever it is clear from the context and identify the circuit with its set 
of gates. 

3.1. Circuit evaluation. The evaluation of a circuit (F,7) is the (unique) circuit (F,7') 
where for each gate g GT the following holds: 

• j'{g) = iff 7(5) = {and, I, r) and 7'(/) = or 7'(r) = 0, 

• 7' (5) = 1 iff 7(5) = {and, I, r) and 7'(/) = 1 and 7'(r) = 1, 

• j'lg) = {id, I) iff 7(5) = {and, I, r) and -f'{l) {0, 1} and 7'(r) = 1, 

• y (5) = {id, r) iff 7(5) = {and, I, r) and 7'(r) {0, 1} and ^{1) = 1, 

• j'lg) = iff 7(5) = {or, I, r) and ^{1) = and 7'(r) = 0, 

• 7' (5) = 1 iff 7(5) = {or, I, r) and 7'(/) = 1 or 7'(r) = 1, 

• j'lg) = {id, I) iff 7(5) = {or, I, r) and j'{l) {0, 1} and 7'(r) = 0, 

• j'lg) = {id, r) iff 7(5) = {or, I, r) and 7'(r) {0, 1} and 7' (/) = 0, 

• l ig) = 7'(s) iff 7(5) = {id, s) and 7'(s) G {0, 1}, and 

• 7' (5) = 7(5) otherwise. 

A circuit is evaluated if all constant gates are sink gates. In an evaluated circuit, all gates 
that do not depend on variable gates are constant. Hence, a circuit without any variable 
gates evaluates to a constant circuit; for a circuit that contains variable gates, a subset of 
the gates is relabeled: some and- / or- / id-gates are labeled as constant or id-gates. 

The problem of evaluating monotone planar circuits has been studied extensively in the 
literature [l3l [lUl EOl HI ESI E] . Our construction is based on the evaluation of one-input-face 
planar circuits: Given a circuit G = (F, 7) with variable gates X, the graph gr(G) of G is 
the directed graph (F, E), where E = {{a, b) £ T x T \ a b} . A circuit C is planar if there 
exists a planar embedding of the graph of C. A planar circuit G is one-input-face if there 
is a planar embedding such that all gates of src(G) are located on the outer face. Note that 
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an evaluated planar circuit with all variable gates on the outer face is one- input-face. The 
evaluation of one-input-face planar circuits can be parallelized efficiently. We make use of 
a result by Chakraborty and Datta |6j: 

Theorem 3.1 (Chakraborty and Datta 2006). The problem of evaluating an one-input-face 
planar circuit without variable gates is in logDCFL. 

Using standard techniques [20] . the theorem generalizes to circuits that contain variable 
gates: 

Corollary 3.2. The problem of evaluating an one-input-face planar circuit is in logDCFL. 

Proof. We first assign the Boolean constant 1 to all variable gates. Each gate that evaluates 
to is turned into a constant gate. Next, we assign to all variable gates. Each gate that 
evaluates to 1 is turned into a constant gate with value 1. Since the values of the remaining 
gates depend on the variables, they are simply copied. If one of the latter gates depends on 
a constant gate, the dependency is removed by changing such a gate into an id-gate. □ 

3.2. Transducer Circuits. The central construction in our path checking algorithm is 
circuit composition: circuits for larger subformulas are built from circuits for smaller sub- 
formulas by connecting variable gates of one circuit to gates of another circuit. To facilitate 
this operation, we introduce transducer circuits, which are circuits with a defined interface 
of input and output gates that allow the circuit to transform a sequence of Boolean input 
values, for example the values of a subformula at different positions of the path, into a 
sequence of output values. 

A transducer circuit is a tuple T = {T,j,I,0) where G = (r,7) is a circuit, / is a 
(strict) ordering of var(G), and O is a (strict) ordering of a subset of T. I is called the 
input of T and O is called the output of T. The input and output arity is the length of the 
input and output, denoted as ||/|| and ||0||, respectively. We denote the z*^ element of / 
and O by I{i) and 0{i), respectively. The transducer circuit T is planar if G has a planar 
embedding such that the gates of / appear counter-clockwise ordered on the outer face, the 
gates of O appear clockwise ordered on the outer face, and between any two gates of / on 
the outer face there are either no or all gates of O, i.e., the gates of / and O do not appear 
interleaved on the outer face. 

Given two planar transducer circuits G = {T,j,Ig,Og) and D = {A,6, Id,Od), G is 
composable with D if the input arity of D equals the output arity of G. The composition 
GoD of G with D is the planar transducer circuit E = {E.,e, Ie,Oe) with E = FUA, 
Ie = Ig, Oe = Od and 




i{g), forger, 

6{g), for (7 G A \ var(A), and 



e{lD{i)) = {id^Oaii)), for < ^ < \\0g\\. 

The composition GoD can be computed by a logspace restricted deterministic Turing 
machine. 

A transducer circuit T represents a function fx ■ BH^H — t- bI'^^H, where /t(s) for some 
sequence s E BH^H is computed by evaluating the composition of T with the constant circuit 
that represents s. The values of the output gates of the resulting constant circuit define the 
sequence fris). 
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Lemma 3.3. For two one-input-face planar transducer circuits G and D, such that G is 
composahle with D, the evaluation of Go D is an evaluated one-input-face planar transducer 
circuit and can he computed within logDCFL. 

Proof. Let G = {Tj^JjIcOg) and D = {A,5, Id,Od)- The transducer circuits G' and D' 
are obtained from G and D, respectively, as follows. For each i, < i < ||Og||, with Ocii) 
being a constant gate 6 in G 

• 6 is removed from G' , including ©^(i), 

• 6 is added to D' , 

• 5'{lD{i)) = b, and 

• Inii) is removed from I'^. 

In other words: all constant outputs of G are moved out of G' into D' . Clearly, G' is 
composable with D' and the evaluation of G' o D' equals the evaluation of Go D. Further, 
G' and D' are both one-input-face and planar. Because G' is one-input-face, all constants 
are either on the outer face or are sinks. Since all constant gates that are sinks in G but 
not in Go D have been moved out of G' into D' it holds that all constants in G' are on 
the outer face or are sinks also in G' o D' . G' o D' generally is not one-input-face, because 
src(D') can contain constant gates that are neither sinks nor on the outer face of G' o D' , 



thus preventing the application of Theorem 3.1 However, D' is one-input-face and planar 



and can thus be evaluated in logDCFL using Theorem 3.1, resulting in a circuit D" where 
all constants are sinks. Now, in the composition of G' with D" all constants are either 
on the outer face of G' or are sinks. Thus, G' o D" is an one-input-face planar transducer 
circuit that can be evaluated in logDCFL. The circuits G' , and D' , as well as the circuit 
compositions are computable in logarithmic space. D 



4. Constructing Circuits On-The-Fly 

We now describe the translation of BLTL+Past-formulas in positive normal form to planar 
circuits. As discussed in the introduction, the translation is not done as a preprocessing step, 
but rather delayed until one of the direct subformulas has been evaluated. We guarantee 
that the resulting circuit is planar, one-input-face, and evaluated. The path checking algo- 
rithm, which will be presented in the next section, composes the evaluated one-input-face 
planar circuits in order to represent larger partially evaluated subformulas. 

Given a path p and a BLTL+Past formula (p in positive normal form with at most 
one unevaluated direct subformula, the following construction provides a function cirp that 
maps the top-level operator of (j) and its evaluated subformulas to an evaluated one-input- 
face planar transducer circuit that represents a partial evaluation of (j) on p. The output arity 
of the circuit is \\p\\, the input arity is ||p|| for all formulas except for atomic propositions, 
where the circuit has input arity 0. The circuit can be constructed by a logspace restricted 
Turing machine. The full details of the construction are provided in the appendix. 

4.1. Atomic propositions. For an atomic proposition p, the circuit is a set of constant 
gates, one for each path position. The value of a gate is the value of p at the respective 
position of p: ciip{p) = {{oq, . . . , o„_i} , /, e, O), where n = \\p\\, O = oq, . . . ,o„_i, l{oi) = 1 
iff p G Pi, and £ denotes an empty input sequence. Clearly, a set of constant gates is an 
evaluated one-input-face planar transducer circuit. 
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4.2. Unary operators. For the unary operators X^,X^, Y^, and Y^, the circuit shifts the 
value of the input by one position in the respective direction. The first (respective last) 
position of the output is a constant with value for strong operators and value 1 for weak 
operators. Again, the circuits are obviously planar, one- input-face, and evaluated, and of 
input and output arity \\p\\. E.g. cirp(X^) = {G,l,I,0), where n = \\p\\, I = vq, . . . ,Vn-i, 
O = oo, . . . ,o„_i, G = {vq, . . .,Vn-i} U {oo, . . . ,o„_i}, and 

\ {id,Vi+i) forO<i<n-l, 
l[Oij = < 

I for i = n — 1, and 

l{vi) = ? for < i < n. 



4.3. Binary operators. The binary operators require two constructions, one for the case 
where the left argument has been evaluated and one for the case where the right argument 
has been evaluated. For each operator op, we define two logspace-computable functions 
cirp(s, op) and civ p{op , s) , which compute the circuit given an evaluation s G B"'''! of the 
left and right subformula, respectively. 

For the Boolean operators, the two functions are the same, e.g., cirp(V, s) = cirp(s, V) = 
{G,l,I,0), where n = \\p\\, I = vo,...,Vn-i, O = oo,...,o„_i, G = {vq, . . . ,Vn-i} U 
{oq, . . . ,o„_i}, and 



l{oi 

l{Vi 



i{id,Vi) for Si 
1 for Si 

? for < i < n. 



and < i < n, 

1 and < i < n, 



and 



For the unbounded temporal operators, the constructions are derived from the expansion 
laws of the logic, such as U^r- = (f'r^/ {4>i ^'^^ {'Pi U</)r)) for the unbounded Until operator. 
The expanded formula is transformed into a transducer circuit by substituting constants 
for evaluated subformulas and variable gates for unevaluated subformulas. E.g. cirp(U, s) = 



{G, I, I, O), where n 
{oo, . . . ,o„_i}, and 



I 



,Vn-l, O 



, On_i, G = {vo, . . . ,i;„-i} U 



l{o,) 



and cirp(s, U) 



{and,Vi,Oi+i) 
1 

Jn-l 

l{vi) = ? for < z < n, 
{G,l,I,0), where 

{or,Vi,Oi+i) 
< {id,Vi) 

^{id, Vn-l) 

? for < i < n. 



l{oi 



for < i < n — 1 and Si 
for < i < n — 1 and Sj 
for i = n — 1, and 



for < i < n — 1 and Sj 
for < i < n — 1 and Sj 
for i = n — 1, and 



0, 
1, 



1, 
0, 



l{Vi 



The most difficult part of the construction is the translation for the bounded operators, 
which we now present in detail for the bounded Until operator U;, . Figure [6] illustrates the 
construction of cirp(s, Ub ) for a valuation s = 0, 1, 0, 1, 1, 1, 0, 1 of the left subformula. The 
gates indexed by i,j compute the value of the formula at position i and "remaining" bound 
b — j. If, at some position, the left subformula evaluates to 0, then the formula simplifies to 
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idofi Vi,o 1^2,0 Vs^o V4_o V5,o idefi id-jfi 




jrfo.l Vi,i 1^2,1 V3,i V4,l V5,i idf5_i 1^74 




*do,2 Vi,2 1^2,2 V3_2 V4,2 V5,2 id6,2 jd7,2 




?0,3 


?1,3 


?2,3 


?3,3 


?4.3 


?5,3 


?6,3 


?7,3 





1 





1 


1 


1 





1 



Figure 6: The circuit cirp(s, U3 ) for ||p|| = 8. The bottom hue shows an example evaluation 
s = 0, 1, 0, 1, 1, 1, 0, 1 of the left subformula. 



Ao > li O2 O3 A4 > A5 > Afi > I7 



?0 


?i 


?2 


?3 





1 









Figure 7: The circuit cirp( U3 , s) for ||p|| = 8. The bottom line shows an example evaluation 
s = 0, 1, 0, 0, 0, 0, 0, 1 of the right subformula. 



the right subformula, independently of the remaining bound. This results in vertical edges 
in the circuit. If the left subformula evaluates to 1, then the formula is true if it is either 
true for bound j — 1 in position i + 1 or for bound j — 1 in position i. In the circuit, this is 
computed as a disjunction of the vertical and the diagonal neighbor. 

We define cirp(s, U;, ) = {G,l,I,0), where G = {vij \ < i < n,0 < j < b}, I = 
vo,b, • • • , Vn-i,b, O = ^0,0, • • • , fn-1,0, and 

{id, Vjj+i) for < i < n — 1 and j < b and Si = 0, 

, , , {or,Vi j-L.i,Vi+i j+i) for < i < n — 1 and j < b and Si = 1, 
l[Vij) = < 

[id, Vij+i) for i = n — 1 and j < b, and 

^ ? for j = b. 

The construction of cirp(U3,s) for the valuation s = 0,1,0,0,0,0,0,1 of the right sub- 
formula is illustrated in Figure [7] Here, the gates indexed by i compute the value of the 
formula at position i. If the right subformula evaluates to 1 in position i, then the value 
of the formula is 1 in position i, and is computed by the conjunction over the values of the 
left subformulas in positions i — b to i — 1. Further to the left from i — b, the value is until 
another 1 occurs in the valuation of the right subformula. 
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The circuit is therefore defined as cirp(Ufe,s) = {G,l,I,0), where I = vq, . . . ,Vn-i, 
O = oo, . . . ,o„_i, G = {vq, . . . U {oo, . . . ,o„_i}, and 

{1 for < i < n and Sj = 1, 

for < i < n and Vj, i < j < min(i + b, n).Sj = 0, 

{and,Vi, Oi^i) for < i < n — 1, Sj = 0, 3j, i < j < min(i + b,n).Sj = 1, and 
l{vi) = ? for < i < n. 

We conclude the section with a lemma that formally states the existence of the logspace- 
computable function cirp with the required properties. The complete construction of cirp is 



provided in the appendix 



Lemma 4.1. Let <j) and ip formulas and p an atomic proposition. Let p a path and 
s,t £ bII''II with s = (j){p) and t = ip{p)- There is an logspace- computable function cirp map- 
ping its arguments to evaluated one-input-face planar transducer circuits such that p{p) = 
cirp(p)(), {op(t)){p) = fc\Tp(op){s) for op E {X^, X^, Y^', Y^}, and {4>opilj){p) = fcirp{s,op){t) 
and {(j)opilj){p) = fcirp(op,t){s) for op G {V,A,U, U6,R, R;, , S, , T, T,, }. □ 



5. Parallel Tree Contraction for Path Checking 

The parallel path checking algorithm for BLTL+Past formulas is based on a bottom-up 
evaluation of the formula converted to positive normal form starting with the atomic propo- 
sitions. The central data structure is a binary tree, called the contraction tree, that keeps 
track of the dependencies between the different evaluation steps. Initially, the contraction 
tree corresponds to the formula tree where each unary node (due to X^, X^, Y^, and Y^ 
operators) has been merged into a single node with its unique child node. The evaluation 
of the formula is performed by contraction steps, which contract a node that has already 
been evaluated with its parent into a new edge from its sibling to its parent. The resulting 
edge is labeled by a planar circuit that represents the partially evaluated subformula. 

Since no child needs to wait for the evaluation of its sibling before it can be contracted 
with its parent, a constant portion of the nodes can be contracted in parallel, and, within 
logarithmic time, the tree is evaluated to a single constant circuit. We now describe and 
analyze this process in more detail. 

5.1. Contraction tree. Given a formula </> in positive normal form and a path p, let 
(pQ, . . . , 4>m-i be the subformulas of (f) with (f)^ = cj). A contraction tree is an edge labeled tree 
T = (T, t, I) where T C {./.q, ...,(/> m-i} U {root}, t C I is a subformula of (/>j} U 

{(root, 0)}, and / is a mapping that labels each edge of T with an evaluated one-input-face 
planar transducer circuit, such that the following conditions hold: 

(1) T \ {root} is an ordered, rooted, regular, binary tree, 

(2) all edge labels of T are evaluated one-input-face planar transducer circuits of arity ||p||, 
all leaves are atomic propositions, and 

(3) for T = £ t it holds that fi{T){4'j{p)) = '^{p)y where is the direct subformula 
of (pi that has (pj as a subformula. Further, for the unique edge r = {root,(pj) G t it 
holds that fi{r){(pj{p)) = (p{p)- 
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The special node root and the corresponding edge {root, 0) were added solely for technical 
reasons. 

The first condition ensures that the overall contraction process performs in a logarith- 
mic number of parallel steps. The second condition provides the preconditions for a single 
contraction step. Namely, the compositionality of the constructed circuits and the com- 
plexity of logDCFL. The third condition states the induction hypothesis for the soundness 
of the whole algorithm: When a transducer circuit is attached to an edge of the contraction 
tree, it encodes the semantics of all partially evaluated subformulas contracted into that 
edge. 



5.2. Initialization step. The initial contraction tree T \ {root} is the formula tree (j) 
where each unary node (due to X^, X^, Y^, and operators) has been merged with its 
unique child node. The corresponding new parent edge is labeled by the transducer circuit 
that results from composing the circuits produced by applying cir^ to the corresponding 
BLTL+Past operators of the eliminated nodes. 

Lemma 5.1. Given a formula (j) in positive normal form and a path p, a contraction tree 
T can he constructed from (j) and p by an logspace restricted Turing machine. 

Proof. Define parent (x) to be the subformula ip oi (f) such that x is the maximal subformula 
of V' in (j). Let T = {T, t, I) with T = {(pi \ <pi is not of the form X'^ip, XV, Y^-^, or Y^, < 
i < m}[j{root}, t = {{(j)i,(j)j) G TxT \ (pj is a maximal subformula in T of (pi}U{{root, (p)} , 
and for t £ t, 



1{t) 




for T = {root, (p), 
otherwise, 



where for < i < m. 



c{{(t)i,x)) 



cir, 



,(X^) oc(parent(0j)) 
cir„ (X^)oc(parent((/)i)) 
cirp(Y^) o c(parent(0i)) 
cirp(Y^) o c(parent(0j)) 
id 



for parent 
for parent 
for parent((/)j) 
for parent 
otherwise, 



where id is the identity transducer circuit of arity \\p\\. 

In T, all simple paths (due to X^, X^, Y^, and Y^ operators) have been collapsed 
into single edges. This ensures that T \ {root} is an ordered, rooted, regular, binary tree. 
The circuits cirp(X^), cirp(X^), cirp(Y^), and cirp(Y^) are evaluated one-input-face planar 
transducer circuits that do not contain any constants. Hence, any number of these circuits 
can be composed resulting in an evaluated one- input-face planar transducer circuit. The 
composition of planar transducer circuits can be performed in logarithmic space. The 
mapping c is defined recursively above. However, it is easy to see that the whole procedure 
can be performed iteratively in logarithmic space in the size of p plus the size of (p. From 
the above, the first and the second condition for a contraction tree are clear. The third 
condition is obtained by applying Lemma 4.1 to the construction. O 
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5.3. Contraction step. In the following, we describe the contraction of the tree T. During 
a contraction step, a node that is labeled by a constant circuit is merged with its parent 
node. The resulting node is contracted into the edge from its sibling to its grandparent. 

Lemma 5.2. Let (pi a node of a contraction tree T with child nodes 4>j and (pk md parent 
node p. Assume (pj to be a leaf. Let s be the evaluation of cirp{(j)j) ol{{(j)i,(t)j))- Let T' = 
{T',t',l'), where 

T' = T\{0j,0J, 

t' ^tU {{(j>p,(l)k)} \ {{(pi^cpj), {(pi.cpk), {(t)p,(f>i)}, 

^'i.4> ) ^ 1^'""^'^"^'°" of l{{(j>i,<j)k)) och-p{fs{),(l)i) ol{{(p^,p) if is the left child of (p^, 

1 evaluation o/ ^((0^, 0^)) o cirp((/)j, o if (pj is the right child of (pi, 

l'{x) ^ l{x) for (pk- 
T' is a contraction tree and can be computed in logDCFL. 

Proof. First, note that by construction of T it holds that (pi,(pj,(pk 7^ root. Clearly, if 
T\{root} is an ordered, rooted, regular, binary tree then T'\{root} is an ordered, rooteted, 
regular, binary tree, as well. By construction of T' a leaf in T' is a leaf in T as well. Thus, 
because 7" is a contraction tree, each leaf in T' is an atomic proposition. Since (pj is a leaf 



is an atomic proposition. Due to Lemma 4.1 ciiCp{(pj) can be composed with l{{(pi,(pj)) 



resulting in an one-input-face planar circuit that can be evaluated in logDCFL. Thus s is a 
constant circuit of arity \\p\\ and cir p{fs{), (pi) (respectively cirJjpi, /s())) is well defined and 



of arity ||p||. Because T is a contraction tree and by Lemma 3.3, l'{{p,(pk)) is an evaluated 
one-input-face planar transducer circuit. By the definition of o the input arity of l'{{p, (pk)) 
is the input arity of l{{(pi,(pk)) and the output arity of l'{{p,(pk)) is the output arity of 
l{{p, (pi)). Because 7" is a contraction tree this arity is ||p|| in both cases. All remaining edge 
labels of T' inherit the arities from T. Considering the edge (p, (pk) S t' , the third condition 
for a contraction tree holds, since 7" is a contraction tree, and due to the definition of o, 
and because of Lemma |4.1[ For all other edges, the property is directly inherited from 7~. 



The computation of T' is in logDCFL because of Lemma 3.3 and Lemma 4.1 O 



5.4. The path ch ecki ng algorithm. Applying Lemma 5.1 and Lemma 5.2 to (p and p, we 

can use Algorithm 2.3 to obtain an AC^ (logDCFL) solution to the path checking problem. 



This proves our main theorem: 

Theorem\^ Civen a BLTL+Past formula (p and a path />, convert (p into positive normal 
form using only logarithmic space. A contraction tree T is initialized from (p in logarithmic 
space by use of Lemma 5.1 and then Algorithm 2.3 is applied to T with the contraction step 

Note that the extra root node and the edge {root, (p) in T do not 



defined in Section 5.3 



influence the performance of Algorithm |2.3[ The algorithm terminates when there is only a 



single leaf node n and a single edge {root, n) left in the contraction tree. By Lemma 5.2, the 
contraction algorithm performes in AC (logDCFL). The value of the first output gate of the 

cirp(n) o l({root, n)) is the result. By Lemma 



5.2 



c is evaluated 



evaluation of the circuit c 
and one-input-face and can hence be evaluated in logDCFL. Th e wh ole construction can 
be executed within AC^(logDCFL) in \\(p\\ + \\p\\. Using Lemma 2.2, we can assume that 
any bound occurring in (p has at most size \\p\\. The sum of the bounds is thus polynomial 
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in the size of (p (without bounds) and the length of p. Thus, the overall complexity of 
AC (logDCFL) is independent of the encoding of the bounds in (p. □ 

Since LTL and LTL + Past both are subsets of BLTL + Past Theorem [T] and Theorem 
[2] are obtained as corollaries of Theorem [3l 



6. Conclusions 

We have presented a positive answer to the question whether LTL can be checked efficiently 
in parallel on finite paths by giving an AC^(logDCFL) algorithm for checking formulas of 
the extended logic BLTL+Past over finite paths. This result is a significant step forward in 
the research program towards a complete picture of the complexities of the path checking 
problems across the spectrum of temporal logics, which was started in 2003 by Markey and 
Schnoebelen [25] . While other extensions of LTL, for example with Chop or Past+Now, 
immediately render the path checking problem P-complete and, hence, inherently sequen- 
tial LTL with past and bounds can be checked efficiently in parallel. 

There is a growing practical demand for efficient parallel algorithms, driven by the 
increasing availability of powerful (and inherently parallel) programmable hardware. For 
example, tools that translate PSL assertions to hardware-based monitors [3 [5l [11] can 
immediately apply our construction to evaluate subformulas consisting of bounded and 
past operators in parallel rather than sequentially. Similarly, monitoring tools based on 
LTL+Past can buffer constant chunks of the input and then evaluate the buffered input in 
parallel using our construction. 

The capability of our algorithm to absorb the exponential succinctness of past and 
bounds is due to the use of planar circuits as a representation of partially evaluated subfor- 
mulas, which allows the evaluation of the formula to efficiently stop and resume, as dictated 
by the dependencies between the subformulas. We expect that the use of planar circuits as a 
data structure in parallel verification algorithms, following the pattern of our construction, 
will find applications in other model checking problems as well. 

There are several open questions that deserve further attention. There is still a gap 
between AC^(logDCFL) and the known lower bound, NC^. There is some hope to further 
reduce the upper bound towards NC , the currently known lower bound, because our con- 



struction relies on the algorithm by Chakraborty and Datta (cf. Theorem 3.1 ) for evaluating 
monotone Boolean planar circuits with all constant gates on the outer face. The circuits 
that appear in our construction actually exhibit much more structure. However, we are not 
aware of any algorithm that takes advantage of that and performs better than logDCFL. 
An intriguing question along the way is whether the path checking complexities of LTL and 
BLTL+Past are actually the same: while they are both in NC, the circuits resulting from 
BLTL+Past formulas seem to be combinatorially more complex. Finally, an interesting 
challenge is to exploit the apparent "cheapness" of the BLTL+Past path checking problem 
beyond parallelization, for example in memory-efficient algorithms. 
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Let n = \\p\\. Let 6 G N. Let I = vq,. . . ,Vn-i and O = oq, . . . ,On~i- Let G = I U O. Let 
H = {9i,j \ < i < n,Q < j < b}. Let Oh = gofl, gn-i,o- Let In = go,b, 9n-i,b- 

For an atomic proposition p ciip{p) = {0,l,e,0), where l{oi) = 1 iS p & pi and £ 
denotes an empty input sequence. 
cirp(V, s) = {G, I, I, O), where 



Appendix: Construction of cir^ 




for Si = and < i < n, 
for Si = 1 and < i < n, 



l{vi) = ? for < z < n; 



cirp(s, V) 
cirp(A,s) 



cirp(V,s); 
{G,l,I,0), where 




1 and < i < n, 
and < i < n, 



l{vi) = ? for < i < n; 



cirp(s, A) 
cirp(X3) : 



: cirp(A,s); 
{G,l,I,0), where 




{{id, Wj+i) for < i < n — 1 
for z = n — 1, 

7 for <i < n; 



l{Vi) 

cirp(X^) = {G,l,I,0), where 




{id, Uj+i) for < i < n — 1 
1 for z = n — 1, 



Kvi) 

cirp(U, s) = {G,l,I,0), where 



? for < z < n; 



{and,Vi,Oi+i) 
l{Oi) = I 1 

l{vi) = ? for < i < n; 



for < i < n — 1 and Si = 
for < i < n — 1 and = 1 
for ? = n — 1, 
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cirp(s,U) = {G,l,I,0), where 



{or, Vi, Oi_|_i) for < i < n — 1 and Sj = 1, 

K^i) = { {id, Vi) for < z < n — 1 and Si = 0, 

{id, Vn-i) for i = n — 1, 
l{vi) = ? for < i < n; 



cirp(R, s) = {G, I, I, O), where 



{or, Vi, Oj+i) for < z < n — 1 and Si = 1, 
lifii) = sO forO<z<n— 1 and Si = 0, 

s„_i for i = n — 1, 

l{vi) = ? for < i < n; 
cirp(s, R) = {G,l,I,0), where 

{and, Vi, Oj+i) for < i < n — 1 and Sj = 0, 
l{oi) = < {id, Vi) for < i < n — 1 and Sj = 1, 

^{id,Vn-i) ioii = n-l, 

l{g) = ? for gel; 
cirp(Ub,s) = {G,l,I,0), where 

1 for < i < n and ,Sj = 1, 

K'^i) ~ forO<f<n and Vj, i < j < min(i + b, n).Sj = 0, 

^ {and, Vi, Oj+i) for < i < n — 1 and Sj = and 3j, i < j < min(i + b, n) 
l{vi) = ? for < i < n; 
cirp(s, Uft) = {H,1,Ih,0h), where 

' {id, gi,j+i) for < i < n — 1 and j < b and Sj = 0, 

{or, gjj+i, gi+ij+i) for < i < n — 1 and j < b and Si = 1, 

{id, gij+i) for i = n — 1 and j < b, 

? fovj = b, 

cirp( R;, , s) = {G, I, I, O) , where 

for < i < n and Sj = 0, 

K^i) ~ { ^ ioi < i < n and Vj, i < j < min(i + b, n).Sj = 1, 

{or, Vi, Oj+i) for < i < n — 1 and Sj = 1 and 3j, i < j < min(z + b, n). 
l{vi) = ? for < i < n; 
cirp(s, Rb) = {H,1,Ih,Oh), where 

(id, for < z < n — 1 and j < 6 and Sj = 1, 
(anc?, ^j+ij+i) for < i < n — 1 and j < b and Sj = 0, 

{id,gij+i) for i = n — 1 and j < b, 

? for j = b; 



K9i,j) = < 



Kg. 
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cirp(Y3) = {G,l,I,0), where 



Koi) = 



{id,Vi-i) for < i < n, 
^0 forz = 0, 

l{vi) = ? for < i < n; 



cirp(Y^) = {G,l,I,0), where 



l{Oi) 

l{ 

cirp(S,s) = {G,l, 1,0), where 



j {id, Vi-i) for < i < n, 
fori = 0, 

l{vi) = ? for < i < n; 



{and,Vi,Oi-i) for < i < n and Sj = 0, 
K'^i) ~ forO<i<n and Sj = 1, 

So for 1 = 0, 

l{vi) = ? for < z < n; 
cirp(s, S) = {G, I, I, O), where 

[or, Vi, Oi-i) for < z < n and Sj = 1, 
l{oi) = I [id, Vi) for < z < n and Sj = 0, 

{id, vq) for z = 0, 

l{vi) = ? for < z < n; 
cirp(T,s) = {G,l,I,0), where 

(or, Vj, Oj_i) for < z < n and Sj = 1, 
K^i) = ^0 forO<z<n and Sj = 0, 

So for z = 0, 

/(wi) = ? for < i < n; 
cirp(s,T) = {G,l,I,0), where 

(and, Vi, Oj-i) for < i < n and Sj = 0, 
l{oi) = \ {id, Vi) for < i < n and Si = 1, 

{id, vq) for i = 0, 

= ? for G I; 
cirp( S(, , s) = {G, I, I, O), where 

{1 for < i < n and Sj = 1, 

for < i < n and Vj, i > j > max(i — b, —l).Sj = 0, 

{and, Vi, Oi-i) for < i < n and s^ = and 3j, i > j > max(i — b, — 1). 
K^j) = ? for < i < n; 
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cirp(s, Sft) = {H,1,Ih,Oh), where 



K9i,j) 



' {id, gi,j+i) for < i < n and j < b and = 0, 

{or , gi,j+i, gi-i,j+i) for < z < n and j <h and Sj = 1, 

{id,9o,j+i) for j<b, 

? for j = b; 

cirp( Tb , s) = (G, I, I, O), where 

for < z < n and Si = 0, 



l{Oi) = < 



for < z < n and Vj, i > j > min(z — 6, — = 1, 



(or, Wj, Oj-i) for < z < n and = 1 and 3j, i > j > max(z — 6, — = 0, 
= ? for < i < n; 
cirp(s, Tb) = {H,1,Ih,Oh), where 

' (id, ffij+i) for < z < n and j < b and Sj = 1, 

(and, for < z < n and j < 6 and Si = 0, 

{id,go,j+i) for j<b, 

? for J = 6. 
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